1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:

 
# This is a basic ProFTPD configuration file (rename it to 
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName			"ProFTPD Default Installation"
ServerType			standalone
DefaultServer			on
ServerIdent off
# Port 21 is the standard FTP port.
Port				21
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask				022

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances			30

# Set the user and group that the server normally runs at.
User				nobody
Group				nogroup

# Normally, we want files to be overwriteable.
<Directory /*>
  AllowOverwrite		on
</Directory>

# A basic anonymous configuration, no upload directories.
<Anonymous ~ftp>
  User				ftp
  Group				ftp
  # We want clients to be able to login with "anonymous" as well as "ftp"
  UserAlias			anonymous ftp

  # Limit the maximum number of anonymous logins
  MaxClients			10

  # We want 'welcome.msg' displayed at login, and '.message' displayed
  # in each newly chdired directory.
  DisplayLogin			welcome.msg
  DisplayFirstChdir		.message

  # Limit WRITE everywhere in the anonymous chroot
  <Limit WRITE>
    DenyAll
  </Limit>

</Anonymous>

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:

 
# sample /etc/proftpd.conf file
# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.
 
ServerName          "ProFTPD Default Installation"
ServerType          standalone
# wenn der servertyp inetd gewaehlt wird, muss noch folgendes in 
# /etc/inetd eingetragen werden:
# ftp    stream  tcp     nowait  root    /usr/sbin/tcpd  /usr/local/sbin/proftpd
#ServerType         inetd
DefaultServer           on
 
# Port 21 is the standard FTP port.
Port                21
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask               022

#security fix as recommended by proftpd-development-team

DenyFilter \*.*/


# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances            30
 
# Set the user and group that the server normally runs at.
User                nobody
Group               nogroup 

# Normally, we want files to be overwriteable.
<Directory /*>
  AllowOverwrite        on
</Directory>  

# anonymous ftp section
 
<Anonymous ~ftp>

# Als Standard verlangt der proFTPd fuer jeden Benutzer eine gueltige shell.
# Da ich aus sicherheitsgruenden dem ftp/anonymous-user keine shell gebe, 
# muss ich diesen mechanismus in dieser section deaktivieren.
  RequireValidShell off
 
# Allow logins if they are disabled above.
    <Limit LOGIN>
       AllowAll
# wenn der server anonymous-login aus dem internet zulassen soll, dann sollte man die
# folgenden drei zeilen vielleicht auskommentieren ;)
       order allow,deny
       Allow from 192.168.1. , .example.net
       deny from all
   </Limit>
 
# Maximum clients with message
   MaxClients                    5 "Sorry, max %m users -- try again later"
   User                          ftp
   Group                         ftp
# We want clients to be able to login with "anonymous" as well as "ftp"
   UserAlias                     anonymous ftp
 
# Limit WRITE everywhere in the anonymous chroot
# chroot -> verzeichnis /home/ftp ;)
   <Limit WRITE>
       DenyAll
   </Limit>
 
# An upload directory that allows storing files but not retrieving
# or creating directories.
# man muss das unterverzeichnis "uploads" im verzeichnis "/home/ftp" erstellen
# und alle rechte geben "chmod 777 /home/ftp/uploads" 
   <Directory uploads/*>
       <Limit READ>
           DenyAll
       </Limit>
 
       <Limit STOR>
           AllowAll
       </Limit>
   </Directory>
 
</Anonymous>